Platform Privacy Policy
This policy outlines how Global Professional Certifications, operating GRC Openings as Data Fiduciary, collects, processes, stores, and protects personal data under the Digital Personal Data Protection (DPDP) Act, 2023.
Never sold
We do not sell or rent your personal data to anyone, ever.
Encrypted
Data is encrypted in transit and at rest, with role-based access.
You control it
Access, correct, export, or delete your data from your settings.
Minimal by default
We collect only what is needed to run the platform for you.
Legal roles under the DPDP Act, 2023
Global Professional Certifications determines the purposes and means of processing personal data as the Data Fiduciary. You, the registered job seeker or employer, are the Data Principal. Vetted cloud hosting and security infrastructure partners act strictly as Data Processors under binding contracts.
Data Fiduciary
Global Professional Certifications determines the purposes and means of processing personal data.
Data Principal
You, the registered job seeker or employer, whose personal data is being processed.
Data Processor
Vetted cloud hosting and security infrastructure partners acting strictly under binding contracts.
Repository of candidate data collection points
We collect personal data exclusively through the following platform touchpoints and features.
Account Enrollment & Login Forms
Full name, registered email address, mobile number, and password hashes collected at registration and sign-in.
Candidate Profile & Resume Builder
Uploaded CV/resume documents, employment history, academic records, and verified GRC credentials (e.g., CISA, CRISC, CISSP).
AI Resume Tools & Optimization Workflows
Resume files, targeted job descriptions, and skills data submitted to AI tools for scoring and keyword alignment.
Direct Job Applications
Candidate profiles, cover letters, and application logs submitted to employer listings.
Employer Verification Modules
Company registration details, GSTIN/CIN records, corporate addresses, and authorized representative credentials.
Automated Technical Telemetry
IP addresses, browser types, session cookies, operating system details, and activity timestamps recorded during site navigation.
Legal bases, purpose matrix & retention
We maintain defined lawful bases and retention schedules for all processed information.
| Category | Purpose | Lawful Basis | Retention |
|---|---|---|---|
| Account Information | Maintained for service delivery under contract until profile deletion is requested. | Contract | Until profile deletion |
| Profile & Resume Data | Processed for job matching under contract until deleted by the user. | Contract | Until deleted by user |
| Application Records | Preserved to track stage history and support dispute resolution. | Contract | 24 months post-submission |
| Employer Verification Records | Retained to satisfy statutory and corporate legal obligations. | Legal obligation | 7 years |
| Recommendations & Marketing | Processed based on explicit consent until consent is withdrawn. | Consent | Until consent withdrawn |
| Technical Telemetry Logs | Retained for security audit trails. | Legitimate interest | 12 months |
Data Principal rights & consent withdrawal
Under Chapter III and Section 6(4) of the DPDP Act, you hold enforceable statutory rights, exercisable from your account settings or by writing to us.
Right to Access (Section 11)
Request a summary of your processed data and active processing activities.
Right to Correction & Erasure (Section 12)
Update incomplete records or delete your account and associated profile data.
Right of Grievance Redressal (Section 13)
Submit complaints to our designated Grievance Officer, with escalation available to the Data Protection Board of India.
Right to Nominate (Section 14)
Appoint an individual to exercise your data rights in the event of death or incapacity.
Right to Withdraw Consent (Section 6(4))
Revoke optional consent anytime via your account dashboard; data processing stops immediately upon withdrawal.
Data Sharing and Third-Party Disclosures
Personal data is never sold or rented. Candidate information is shared solely with employers when an application is submitted, with vetted cloud processors under strict confidentiality contracts, or when required by court orders and statutory authorities.
Data Security & Storage Safeguards
All records are protected using encryption in transit (TLS) and at rest (AES-256), strict role-based access control (RBAC), and automated notifications for critical security events.
Grievance officer & contact details
For inquiries, data rights requests, or statutory grievances, contact:
- Entity
- Global Professional Certifications
- Address
- 5th Floor, Unit 502, Tower B, Capital Business Park, Sohna Road, Sector 48, Gurugram, Haryana - 122018
Request a copy of your data
Get a machine-readable copy of everything we hold about you. We respond to all verified requests within thirty days.